General

  • Target

    5a2523a3df145fdb69d1069009c8473f7207cae6cc339af7a0967d68166aed08

  • Size

    715KB

  • Sample

    231011-ntcreace8v

  • MD5

    7827da5477144094250cbecbe8598fd1

  • SHA1

    8158186be7490f59db4b8f1fd7f7c97c9835d577

  • SHA256

    5a2523a3df145fdb69d1069009c8473f7207cae6cc339af7a0967d68166aed08

  • SHA512

    c153ceb2353a5766250ba98bbba7c459f7d855eb00d74086b2b87924c4420823b9b63c50a14acda1a23a9994bdf9f94868d8c37b9bf933caf26367ccc92a1e12

  • SSDEEP

    6144:XA01NdPuvxQWrSYYaER7ifbiERxQ7cUBmCUiJbc77ZvfuYuEdGxTC2hWf7xLUnwa:Xd25QWWqfb0ShtdGxTC2P5JL

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      5a2523a3df145fdb69d1069009c8473f7207cae6cc339af7a0967d68166aed08

    • Size

      715KB

    • MD5

      7827da5477144094250cbecbe8598fd1

    • SHA1

      8158186be7490f59db4b8f1fd7f7c97c9835d577

    • SHA256

      5a2523a3df145fdb69d1069009c8473f7207cae6cc339af7a0967d68166aed08

    • SHA512

      c153ceb2353a5766250ba98bbba7c459f7d855eb00d74086b2b87924c4420823b9b63c50a14acda1a23a9994bdf9f94868d8c37b9bf933caf26367ccc92a1e12

    • SSDEEP

      6144:XA01NdPuvxQWrSYYaER7ifbiERxQ7cUBmCUiJbc77ZvfuYuEdGxTC2hWf7xLUnwa:Xd25QWWqfb0ShtdGxTC2P5JL

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks